Re: Missing /var/log/wtmp

2019-01-21 Thread Colleen Keegan
Colleen Keegan

Re: User logins not appearing in wtmp?

2012-06-07 Thread Camaleón
fic reason for wanting these logs available within >> wtmp? :-? > > The natural thing to do when checking for last access is to use the last > command. However, last shows no access for the compromised account > mentioned in the other thread. The hackers use scp/sftp to remain under &

Re: User logins not appearing in wtmp?

2012-06-06 Thread francis picabia
this user with last command to see if this is part of a >> travel pattern or perhaps their account is compromised, I don't get any >> matches. I've used last and last -f /var/log/wtmp.1 with the user name >> and there are no matches. > > OpenSSH logins fall under

Re: User logins not appearing in wtmp?

2012-06-06 Thread Camaleón
tern or perhaps their account is compromised, I don't get any > matches. I've used last and last -f /var/log/wtmp.1 with the user name > and there are no matches. OpenSSH logins fall under "/var/log/auth*" logs. > Yet finger shows a login from Apr 24, which jives with th

User logins not appearing in wtmp?

2012-06-06 Thread francis picabia
used last and last -f /var/log/wtmp.1 with the user name and there are no matches. Yet finger shows a login from Apr 24, which jives with their last .bash_history update One way this could happen is by use of sftp/scp. Is there a way to get last to record these sessions as well? -- To UNSUBSCR

wtmp log exploding

2005-09-25 Thread James Sweet
I've got Debian running on a headless Sun SPARCclassic box and I'm having an odd problem where the wtmp log file grows explosively, 10-15MB a day. I had the same problem with Redhat 6.2 so I'm not sure what to make of it. Below is a sample of what it's full of, any id

Re: last -t lists all entries in wtmp

2005-07-22 Thread michael
On Fri, 2005-07-22 at 13:03 +, J.A. de Vries wrote: > On 2005-07-22 @ 00:13:38 (week 29) michael wrote: > > > I think it's a question of interpretation of the man pages. To me it > > seems that '-x' *also* gives the runlevel info; and that '-t' gives all > > entries *up to* a date (as opposed

Re: last -t lists all entries in wtmp

2005-07-22 Thread J.A. de Vries
On 2005-07-22 @ 00:13:38 (week 29) michael wrote: > I think it's a question of interpretation of the man pages. To me it > seems that '-x' *also* gives the runlevel info; and that '-t' gives all > entries *up to* a date (as opposed to since or on that date) Here's the two relevant excerpts fr

Re: last -t lists all entries in wtmp

2005-07-21 Thread michael
On Thu, 2005-07-21 at 23:03 +, J.A. de Vries wrote: > Hi, > > For a monitor script I thought I'd use the -t switch of the last command > hoping to get only the latest entries from wtmp. Seems there's something > wrong there, since it will return all entries in wt

Re: Soved: Missing /var/log/wtmp

2004-02-04 Thread Cheryl Homiak
Yes, using touch seems to work. Would have done that sooner but since what i saw when searching google didn't suggest this simple solution, I thought there must be a problem with it. Thanks. -- Cheryl -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Con

RE: Missing /var/log/wtmp

2004-02-04 Thread Mike Kuhar
> -Original Message- > From: Cheryl Homiak [mailto:[EMAIL PROTECTED] > Sent: Wednesday, February 04, 2004 10:54 AM > To: [EMAIL PROTECTED] > Subject: Re: Missing /var/log/wtmp > > > Ok, I recompiled my kernel with bsd process accounting > compiled in. But

Re: Missing /var/log/wtmp

2004-02-04 Thread Cheryl Homiak
Ok, I recompiled my kernel with bsd process accounting compiled in. But I still must be missing a step, because I still get: /etc/cron.daily/logrotate: stat of /var/log/wtmp failed: No such file or directory run-parts: /etc/cron.daily/logrotate exited with return code 1 -- Cheryl -- To

Re: Missing /var/log/wtmp

2004-02-04 Thread Miquel van Smoorenburg
In article <[EMAIL PROTECTED]>, Cheryl Homiak <[EMAIL PROTECTED]> wrote: >am running debian unstable. I seem to be missing /var/log/wtmp >from my system. I have searched debian >and found no file by that name in the package contents searches. I >searched g

Re: Missing /var/log/wtmp

2004-02-03 Thread Bryan Andersen
Cheryl Homiak wrote: am running debian unstable. I seem to be missing /var/log/wtmp from my system. I have searched debian and found no file by that name in the package contents searches. I searched google; I did find some correspondence on a cygwin list about it being missing. Their

Missing /var/log/wtmp

2004-02-03 Thread Cheryl Homiak
am running debian unstable. I seem to be missing /var/log/wtmp from my system. I have searched debian and found no file by that name in the package contents searches. I searched google; I did find some correspondence on a cygwin list about it being missing. Their solution was to insert

Re: wtmp backup script - howto change "how often"

2004-01-17 Thread Ryan Mackay
Sometime near Sat, Jan 17, 2004 at 11:14:22PM +0100, Peto V. wrote: > Hello. > I'm using unstable & I don't like "settings" of logrotate-I mean "backing > up of /var/log". > For example: > I wanna wtmp to be backed up 1/year (or 1/month), but (!) I

wtmp backup script - howto change "how often"

2004-01-17 Thread Peto V.
Hello. I'm using unstable & I don't like "settings" of logrotate-I mean "backing up of /var/log". For example: I wanna wtmp to be backed up 1/year (or 1/month), but (!) I wanna have only_one wtmp for all year (eg 2004). I think, its simple and i have to just chan

wtmp and setuid gone mad..

2002-11-17 Thread dave mallery
adm466257 Nov 12 06:30 setuid.today -rw-r-1 root adm 2059982 Oct 8 06:26 setuid.yesterday snip< -rw-rw-r--1 root utmp 8640384 Nov 17 2002 wtmp -rw-rw-r--1 root utmp 14795136 Nov 17 06:26 wtmp.1 setuid.* is full of messages from *every* dev

runaway wtmp and setuid on my cluster

2002-11-17 Thread dave mallery
hi both of the above files are filling up at amazing rates: dozens of megabytes per day. the wtmp seems to be filled with login attempts from tty 1-6. the setuid has entries from every device in /dev/ in order. -rw-r-1 root adm466257 Nov 12 06:30 setuid.today -rw-r

Re: logrotate and wtmp confusion...

2002-04-29 Thread Grant Edwards
On Fri, Apr 26, 2002 at 02:55:55PM -0500, Grant Edwards wrote: > On my Woody system, there's nothing in /etc/logrotate.d > except the file for the base-config. Yet, looking at > /var/log shows that syslog, messages, daemon.log user.log, > and other stuff are clearly being rotated.

Re: logrotate and wtmp confusion...

2002-04-29 Thread Grant Edwards
On Mon, Apr 29, 2002 at 10:45:06AM -0500, Grant Edwards wrote: > None of my machines have "chkwtmp", but it turns out that > mgetty is what's causing the huge wtmp files. I don't know if > it's init or mgetty itself that's causing the problem. For the sake

Re: logrotate and wtmp confusion...

2002-04-29 Thread Grant Edwards
On Fri, Apr 26, 2002 at 08:38:25PM -0500, Grant Edwards wrote: > > on the first, check the output of chkwtmp. None of my machines have "chkwtmp", but it turns out that mgetty is what's causing the huge wtmp files. I don't know if it's init or mgetty itself that&#x

Re: logrotate and wtmp confusion...

2002-04-26 Thread Grant Edwards
uff are clearly being rotated. > > > > Since /etc/logrotate.conf only rotates wtmp and btmp, and > > /etc/logrotate.d doesn't control anything except > > installer.* files, where is logrotate getting instructions > > from for rotating the other files

Re: logrotate and wtmp confusion...

2002-04-26 Thread ben
On Friday 26 April 2002 12:55 pm, Grant Edwards wrote: > I've got two questions (that may be related): > > 1) Why are is my wtmp file so huge? I've got a Woody system > that I installed about two weeks ago. I log into it a few > times a day, and the wtmp file

Re: logrotate and wtmp confusion...

2002-04-26 Thread Grant Edwards
On Fri, Apr 26, 2002 at 02:55:55PM -0500, Grant Edwards wrote: > 1) Why are is my wtmp file so huge? I've got a Woody system > that I installed about two weeks ago. I log into it a few > times a day, and the wtmp file is up to over 13MB in 16 > days. > >

logrotate and wtmp confusion...

2002-04-26 Thread Grant Edwards
I've got two questions (that may be related): 1) Why are is my wtmp file so huge? I've got a Woody system that I installed about two weeks ago. I log into it a few times a day, and the wtmp file is up to over 13MB in 16 days. On the RH7.2 system on which I do most

Re: logrotate wtmp,btmp,lastlog

2001-09-20 Thread Miquel van Smoorenburg
In article <[EMAIL PROTECTED]>, Vineet Kumar <[EMAIL PROTECTED]> wrote: >I noticed that the stock /etc/logrotate.conf includes explicit >configurations for wtmp and btmp after this comment: > ># no packages own wtmp, or btmp -- we'll rotate them here > >U

logrotate wtmp,btmp,lastlog

2001-09-18 Thread Vineet Kumar
I noticed that the stock /etc/logrotate.conf includes explicit configurations for wtmp and btmp after this comment: # no packages own wtmp, or btmp -- we'll rotate them here Until recently, this file included a rotator for lastlog as well, and it also had mention in the comment. I'm

Re: utmp/wtmp problem!

2001-09-09 Thread will trillich
now i can > 'cat /dev/null > /var/run/utmp' and > 'cat /dev/null > /var/log/wtmp' > > to resolve this, but i really want to know why. as forrest gump said, "it happens". the wtmp file can get borked, and then reports based on it can get fuxnored. a

utmp/wtmp problem!

2001-08-24 Thread nestea
etc/init.d# i still have not idea ... i know i can 'cat /dev/null > /var/run/utmp' and 'cat /dev/null > /var/log/wtmp' to resolve this, but i really want to know why. any idea?

Re: wtmp question

2001-04-04 Thread Ethan Benson
hrough ssh (that's all i ever > allow, no telnet, no console): > [deleted] > > i would like to be able to see when a user last logged in. this is > handled by wtmp, right? no, /var/log/lastlog is used for this, wtmp is a log of ALL user logins, lastlog is just a log of the last

wtmp question

2001-04-04 Thread MaD dUCK
n pts/4 from fishbowl.dyn.madduck.net 1 second idle No mail. No Plan. diamond:~# i would like to be able to see when a user last logged in. this is handled by wtmp, right? diamond:~# ls -la /var/log/wtmp -rw-rw-r--1 root utmp29568 Apr 4 17:14 /var/log/wtmp diamond:~# looks

/var/log/wtmp was corrupted

2001-03-10 Thread calyth
Somehow, by some odd chances, that my /var/log/wtmp was corrupted, and it left 5 files in /var/log/lost&found and logrotate is complaining. What's wtmp about and how can I fix it? Calyth

Re: rotating /var/log/wtmp?

2000-08-09 Thread Matus \"fantomas\" Uhlar
-> Should I rotate /var/log/wtmp? It's huge. Yet syslogd-listfiles -a -> does not show it. -chris you should but wat needs binary rotating. syslog-listfies lists only files from /etc/syslog.conf wtmp is not handled by syslog (and hardly will be) -- Matus "fantomas" Uhla

rotating /var/log/wtmp?

2000-07-26 Thread Krzys Majewski
Should I rotate /var/log/wtmp? It's huge. Yet syslogd-listfiles -a does not show it. -chris

Re: wtmp rotates two times a month

1999-09-01 Thread Mark Brown
On Wed, Sep 01, 1999 at 10:52:05AM +1000, Brian May wrote: > In /etc/anacrontab, it says that if the monthly activities > have not been run in the last 30 days, then it should run > them NOW! However, July and August are 31 days... Som on > the 31st anacron runs the monthly routines, and on the >

Re: wtmp rotates two times a month

1999-09-01 Thread Brian May
On Mon, Aug 30, 1999 at 06:30:29PM +1000, Brian May wrote: > My system is fully slink. > wtmp: I don't understand why it should be so large for 294 entries: > snoopy# last | wc > 2942788 22522 In investigating the above problem, I found something else: [508] [sno

Once again: bo->hamm and wtmp

1998-09-23 Thread Erik Bunn
he upgrade instructions to the letter, reboots and all; /var/log/wtmp and /var/run/utmp were recreated and their rights are correct, and all software has been updated (I checked that they use libc6). Still, when logging on from the network (through ssh - I don't permit any other connection), who, fing

Re: Fw: PPP and wtmp not working together

1998-09-16 Thread Gavan Murphy
Hi Folks, Peter and Jens have commented on this matter already, but I have a slight variation on the theme. I can get wtmp entries made when the user connects and initiates PPPD, but I fail to get a corresponding entry in wtmp when the session is complete. It is not until another user gets that

pppd no longer logging to wtmp/utmp

1998-09-09 Thread Scott Barker
I had asked the following question on this list some time ago. Has anyone found a solution to this problem, or is it unique to me? > After upgrading to debian 2.0, pppd is no longer logging incoming ppp > connections to wtmp/utmp. I'm using the 'login' option for pppd, wh

Re: Debian 2.0 last, wtmp broken

1998-08-27 Thread john
Eric Fain writes: > Does everyone else use last? It occurs to me that maybe people who don't > have a lot of users on their systems might not have tried last since > upgrading to hamm. Actually, I've never tried it before (two users). Seems to work fine, though. -- John Hasler [EMAIL PROTECTED]

RE: Debian 2.0 last, wtmp broken

1998-08-27 Thread Lewis, James M.
I have a different (but related?) problem with last. After upgrading to 2.0 a few days ago I noticed that logins via X don't show up in last. who works just fine. Apparently xterm puts something in utmp but not wtmp?... I seem to recall something about this. Unfortunately, I've s

Re: Debian 2.0 last, wtmp broken

1998-08-27 Thread Eric Fain
Boulder CO __ On Thu, 27 Aug 1998, Jay Barbee wrote: > It sounds as if you did changing over of wtmp and utmp correctly. I however > did > not. I actually touched wtmp and copied /dev/null to utmp before I rebooted > my > newly install hamm for the first time. This gave

Re: Debian 2.0 last, wtmp broken

1998-08-27 Thread Jay Barbee
It sounds as if you did changing over of wtmp and utmp correctly. I however did not. I actually touched wtmp and copied /dev/null to utmp before I rebooted my newly install hamm for the first time. This gave me garbage for last. So I redid the steps pointed out by the upgrade FAQ, and

Debian 2.0 last, wtmp broken

1998-08-27 Thread Eric Fain
I have 4 machines running Debian, three of which I have upgraded to 2.0 (hamm) from 1.3.1 using autoup.sh. I have followed the instructions contained therein regarding utmp and wtmp, (repeatedly) but my last command does not work properly on any of these machines: "last" returns wi

Re: Fw: PPP and wtmp not working together

1998-08-21 Thread Jens B. Jorgensen
Well, actually it isn't pppd's job to make a utmp/wtmp entry. That job belongs to mgetty. The 'login' option just tells pppd to authenticate users with passwords from /etc/passwd (or /etc/shadow, as the case may be). There's a chicken-and-egg problem here because though

Fw: PPP and wtmp not working together

1998-08-21 Thread Peter Iannarelli
  -Original Message-From: Peter Iannarelli <[EMAIL PROTECTED]>To: Debian ISP <debian-isp@lists.debian.org>Date: Friday, August 21, 1998 6:39 PMSubject: PPP and wtmp not working together Hello:   I read today that in 2.0, a ppp account is not getting logged into the

pppd no longer logging to wtmp/utmp

1998-08-21 Thread Scott Barker
After upgrading to debian 2.0, pppd is no longer logging incoming ppp connections to wtmp/utmp. I'm using the 'login' option for pppd, which is what used to work. What has changed, and how can I get the old behaviour back? -- Scott Barker Linux Consultant [EMAIL

Re: utmp/wtmp problems

1998-06-16 Thread Brandon Mitchell
On Tue, 16 Jun 1998, Troy Hanson wrote: > I just upgraded to hamm from 1.3r8, everything seemed to go smoothly, but > now I have a bit of a problem with utmp/wtmp. [see below]. I remember > seeing something about this in the past, however I cannot find the message. Package: xbase, progr

Re: utmp/wtmp problems

1998-06-16 Thread Nathan E Norman
On Tue, 16 Jun 1998, Troy Hanson wrote: : I just upgraded to hamm from 1.3r8, everything seemed to go smoothly, but : now I have a bit of a problem with utmp/wtmp. [see below]. I remember : seeing something about this in the past, however I cannot find the message. : : The rest of the system is

utmp/wtmp problems

1998-06-16 Thread Troy Hanson
I just upgraded to hamm from 1.3r8, everything seemed to go smoothly, but now I have a bit of a problem with utmp/wtmp. [see below]. I remember seeing something about this in the past, however I cannot find the message. The rest of the system is functioning fine. Any help would be appreciated

Re: Junk being written to wtmp by X

1998-06-15 Thread Brandon Mitchell
On Sun, 14 Jun 1998, Derek Tam wrote: > Here's a look at the output of a last command: > > reboot system boot Sun Jun 14 15:58 > p*** [EMAIL PROTECTED]@ [EMAIL PROTECTED]Sun Jun 14 15:21 - down > (00:34) Known problem with xbase: http://master.debian.org/~bra

Junk being written to wtmp by X

1998-06-15 Thread Derek Tam
00:00) dtam ttyp1:0.0 Sun Jun 14 14:39 - down (01:16) dtam ttyp0:0.0 Sun Jun 14 14:39 - 14:48 (00:09) dtam tty11 Sun Jun 14 14:38 - down (01:17) Looks great, except the garbled lines. The junk seems to get sent to wtmp

X session stays opened in utmp/wtmp

1998-04-30 Thread Peter Paluch
. The missing one is that user who just left XWindow. When I reboot (and/or delete the utmp/wtmp files), everything remains normal until somebody logs into XWindow. If someone else logs into XWindow, he replaces the previous "hanging" user in all mentioned listings. I'm using a ham

Re: wtmp-libc6 (solved)

1998-03-18 Thread dpk
On Wed, 18 Mar 1998, Remco Blaakmeer wrote: > On Wed, 18 Mar 1998, dpk wrote: > > > I previously had tried the steps of removing the wtmp, rebooting, etc > > without success. I tried the libc6 upgrade procedure again, without > > success also. It was due to

Re: wtmp-libc6 (solved)

1998-03-18 Thread Remco Blaakmeer
On Wed, 18 Mar 1998, dpk wrote: > I previously had tried the steps of removing the wtmp, rebooting, etc > without success. I tried the libc6 upgrade procedure again, without > success also. It was due to the non-US package 'ssh'. > > The wtmp file remained readable unt

wtmp-libc6 (solved)

1998-03-18 Thread dpk
I previously had tried the steps of removing the wtmp, rebooting, etc without success. I tried the libc6 upgrade procedure again, without success also. It was due to the non-US package 'ssh'. The wtmp file remained readable until I ssh'ed to my machine - it then became a

Re: wtmp upgrade problems

1998-03-03 Thread Bob Clark
Paul McDermott wrote: > > Hello everybody, I am having problems with some programs after the bo to > hamm upgrade. when I use last or any other commands that use the file > wtmp. I have some problems, ie last does give me garbage for people > logged in. The other problem is tha

wtmp upgrade problems

1998-03-03 Thread Paul McDermott
Hello everybody, I am having problems with some programs after the bo to hamm upgrade. when I use last or any other commands that use the file wtmp. I have some problems, ie last does give me garbage for people logged in. The other problem is that wtmp does not update the anonymous ftp account

Re: Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-23 Thread john
> By the way, the following is copied from /usr/doc/mgetty/README.debian > High Baud Rates > --- > Linux supports 115200 and 57600 Baud, so does mgetty. But some to ols > (notably rlogin and telnet) crash with a segfault at those high > baudrates. I used ppp as a poor-man's LAN f

Re: Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-23 Thread shaul
As a test, can you replce the ATZ with a full init command (I use AT&FE0V1&C1&D2S95=47S0=0M0 with my modem) ? By the way, the following is copied from /usr/doc/mgetty/README.debian " High Baud Rates --- Linux supports 115200 and 57600 Baud, so does mgetty. But some to ols (no

Re: Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-21 Thread Jeff Noxon
On Sat, Feb 21, 1998 at 03:25:42PM -0500, Tim Sailer wrote: > I wrote: > > I just tried to shuffle modems. Only /dev/ttyC1 shows connect speeds. > > That rules out modem settings. > > That makes me thing you need to look at /etc/mgetty.config. Check the > per-port init strings. This is it: # #

Re: Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-21 Thread Tim Sailer
same. > > > > >> But one port always shows connect speed in wtmp, and the others do > > > > >> not: > > > > > > > > The modem settings are identical. The modem firmware revisions are > > > identical. The mgetty configuration lines

Re: Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-21 Thread Jeff Noxon
ave three dial-in modems on my hamm box. They are all identical > > > >> USR Couriers AFIAK, and their configuration *appears* to be the same. > > > >> But one port always shows connect speed in wtmp, and the others do not: > > > > > > The mod

Re: Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-20 Thread shaul
I guess I am only repeating what I have said before, but it realy odd. Have you tried to dump the configurations and user profiles of the modems (AT&V with my modem) ? > The modem settings are identical. The modem firmware revisions are > identical. The mgetty configuration lines are the same.

Re: Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-19 Thread Tim Sailer
box. They are all identical > > > >> USR Couriers AFIAK, and their configuration *appears* to be the same. > > > >> But one port always shows connect speed in wtmp, and the others do not: > > > > > > The modem settings are identical. The modem firmwa

Re: Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-19 Thread David Wright
t;> USR Couriers AFIAK, and their configuration *appears* to be the same. > > >> But one port always shows connect speed in wtmp, and the others do not: > > > > The modem settings are identical. The modem firmware revisions are > identical. The mgetty configuration lines a

Re: Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-19 Thread Jeff Noxon
same. > >> But one port always shows connect speed in wtmp, and the others do not: > > > > Are you sure that they are both set to report the same connect string? > > Usually modems allow varying amounts of detail to be reported > > on the "CONNECT" line, w

Re: Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-19 Thread shaul
> On Mon, Feb 16, 1998 at 01:06:59PM -0600, Jeff Noxon wrote: >> I have three dial-in modems on my hamm box. They are all identical >> USR Couriers AFIAK, and their configuration *appears* to be the same. >> But one port always shows connect speed in wtmp, and the others do

Re: Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-17 Thread Hamish Moffatt
On Mon, Feb 16, 1998 at 01:06:59PM -0600, Jeff Noxon wrote: > I have three dial-in modems on my hamm box. They are all identical > USR Couriers AFIAK, and their configuration *appears* to be the same. > But one port always shows connect speed in wtmp, and the others do not: Are you

Question - Hamm, Mgetty, PPP, wtmp - Arrgh!

1998-02-16 Thread Jeff Noxon
I have three dial-in modems on my hamm box. They are all identical USR Couriers AFIAK, and their configuration *appears* to be the same. But one port always shows connect speed in wtmp, and the others do not: mystic:~$ finger Login NameTty Idle Login Time Office Office Phone

Re: wtmp

1998-02-14 Thread Peter Paluch
Hello Dennis, = dpk wrote: > > I have seen posts on this before, but can't seem to find them in the > mail archives. I upgraded to libc6 (hamm), deleted /var/adm/lastlog,utmp, > wtmp - rebooted. As root I touched these files, did a 'login', and >

Re: trimming wtmp

1998-02-13 Thread Martin Bialasinski
is already done that way. Check /etc/cron.monthly where wtmp is rotated. Ciao, Martin -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .

Re: trimming wtmp

1998-02-13 Thread Carey Evans
Scott McDermott <[EMAIL PROTECTED]> writes: > Does anyone know how I can go about keeping its size manageable? Say, > keep only the last month's worth of data? Without of course zeroing it > every month...I'd like it to always have a month of logs to inspect... This should be done automatically e

trimming wtmp

1998-02-13 Thread Scott McDermott
How do I delete older sections of wtmp? I wouldn't mind leaving it there to gather size but it's getting very large and eating up alot of space. If it were a text file it would be easy to keep it at a certain size but it seems to have some sort of binary format with which I'm not

wtmp

1998-02-12 Thread dpk
I have seen posts on this before, but can't seem to find them in the mail archives. I upgraded to libc6 (hamm), deleted /var/adm/lastlog,utmp, wtmp - rebooted. As root I touched these files, did a 'login', and I then appeared in the 'last' command. However, when I logo

Re: WTMP, BTMP

1998-02-07 Thread Jeremy Tregunna
It is a small bug in the formats of the utmp and wtmp files. Here is a small list of things you should do to completely upgrade: 1) Upgrade to all the packages in the base/ section 2) cd /var/log 3) mv wtmp wtmp.libc5 4) touch wtmp 5) cd /var/run 5) rm -f utmp 6) cp /dev/null utmp 7) shutdown -r

WTMP, BTMP

1998-02-07 Thread Peter Paluch
Hello friends. === Since I've upgraded my Debian to use libc6 (through modem - phew! ;-) my wtmp and btmp entries are completely corrupt and unreadable. I can't find out where the problem is. I've asked also my another friend who uses Debian and he has the same problem

Re: wtmp, last wrecked (bo->hamm upgrade)

1997-11-24 Thread Peter Gervai
On Mon, 24 Nov 1997, Scott Ellis wrote: > > I'm about upgrading to hamm, probably in the middle of it. THe system > > works and no problems detected at all until I realised that my 'last' is > > broken. [...] > The format of the utmp/wtmp file has changed bet

Re: wtmp, last wrecked (bo->hamm upgrade)

1997-11-24 Thread Scott Ellis
the new ones, but 'last' writes > complete garbage, and a slight view at wtmp shows something different than > my old bo ones... > > Can be that logout / leaving an account wrecks it... hard to tell. > > What can be wrong? What programs can modify/handle/wreck wtmp or las

wtmp, last wrecked (bo->hamm upgrade)

1997-11-24 Thread Peter Gervai
Hello, I'm about upgrading to hamm, probably in the middle of it. THe system works and no problems detected at all until I realised that my 'last' is broken. 'login', 'sysvinit' packages are the new ones, but 'last' writes complete garbage, and a sligh

wtmp/ who and w problem. (repost)

1997-11-07 Thread Udjat the BitMeister...
Sorry for the repost.. But I _really_ do need help with this problem. Thanks again! --- I upgraded to hamm a few days ago and I am running into a bit of trouble. I beleve the new wtmp format is the problem. How do I get it working right again? I tried '> wtmp' to blank the file an

wtmp/ who and w problem.

1997-11-06 Thread Udjat the BitMeister...
I upgraded to hamm a few days ago and I am running into a bit of trouble. I beleve the new wtmp format is the problem will reseting it help? If so is correct way to do this '> wtmp' ? Thanks much! [bitgate]udjat /usr/bin $> w 9:40pm up 2 days, 1:33h, 4 users, load ave

Re: wtmp and utmp

1997-04-28 Thread Daniel Quinlan
[EMAIL PROTECTED] (Kevin J Poorman) writes: > what do the files wtmp and utmp do ? type: "man wtmp" or "man utmp". Dan -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .

Re: wtmp problem

1997-04-28 Thread Christopher W Hafey
> I take it your logging into this box via a serial port? > I believe that's the cause of it - Consoles and telnet > logins appear fine for me. > > -- > Karl Ferguson Here's how it hits my machine (kernel: 2.0.30) I login to vt1 (alt F1), do a 'finger': I'm logged on. I login to vt2 (alt

wtmp and utmp

1997-04-28 Thread Kevin J Poorman
Hi what do the files wtmp and utmp do ? Thanks ... -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .

Re: wtmp problem

1997-04-27 Thread Karl Ferguson
At 12:56 AM 27/04/97 -0400, Eloy A. Paris wrote: >Probably it's nothing but I know for sure my utmp file got corrupted >when my /var partition got full after the guys here at the >office sent lots of e-mails with large attachments. > >I just started over with a zero length utmp and everything went

Re: wtmp problem

1997-04-27 Thread Eloy A. Paris
ed - the wtmp or the utmp file? Or both? > I've heard reports about corrupted utmp files, and I'll try to fix that in > 2.71 > > >I run mgetty for the dialin lines, I hooked up a vt100 terminal to a serial > >port on a different machine with 2.70-1 and used plain ge

Re: wtmp problem

1997-04-26 Thread Karl Ferguson
At 10:26 PM 26/04/97 +0200, Miquel van Smoorenburg wrote: >Oh great, you can reproduce it. Can you tell me > >1. which logfile gets corrupted Both the wtmp and utmp. >2. When (before login, during session, after logout) Upon login it seems fine, but upon logout it seems to write

Re: wtmp problem

1997-04-26 Thread Miquel van Smoorenburg
In article <[EMAIL PROTECTED]>, Karl Ferguson <[EMAIL PROTECTED]> wrote: >At 09:12 PM 26/04/97 +0200, Miquel van Smoorenburg wrote: >>I don't think so. I've seen this behaviour before. The wtmp code >>didn't change between 2.69 and 2.70 - the utmp code d

Re: wtmp problem

1997-04-26 Thread Karl Ferguson
At 09:12 PM 26/04/97 +0200, Miquel van Smoorenburg wrote: >I don't think so. I've seen this behaviour before. The wtmp code >didn't change between 2.69 and 2.70 - the utmp code did (but very >slightly, and I still can't find anything wrong with it). Anyway for >2.

Re: wtmp problem

1997-04-26 Thread Miquel van Smoorenburg
In article <[EMAIL PROTECTED]>, Karl Ferguson <[EMAIL PROTECTED]> wrote: >At 10:30 AM 25/04/97 +0300, Daniel MOSMONDOR - Mosh wrote: >>Hi! >> >>I am kind of new to this mailing list, so please excuse me if this subject >>is running around for some time.

Re: wtmp problem

1997-04-25 Thread Karl Ferguson
At 10:30 AM 25/04/97 +0300, Daniel MOSMONDOR - Mosh wrote: >Hi! > >I am kind of new to this mailing list, so please excuse me if this subject >is running around for some time. > >I have a strange wtmp problem, and something suggests that is has something >to do with different

wtmp problem

1997-04-25 Thread Daniel MOSMONDOR - Mosh
Hi! I am kind of new to this mailing list, so please excuse me if this subject is running around for some time. I have a strange wtmp problem, and something suggests that is has something to do with different versions of important system files. I don't consider myself as a linux guru (ye

Re: wtmp locking problem (was: Re: SOLVED: Erk! Something is *really* wrong here!)

1997-03-20 Thread Ioannis Tambouras
> Now this IS the answer. I just downgraded one of my systems to sysvinit > 2.69-1, rebooted, and the corruption seems to be gone. Few weeks ago, my corruption occured with sysvinit-2.69-1. I have been having this same package since December 8. For some unknown reason, few weeks ago m

Re: strange who/wtmp

1997-03-13 Thread Andy Mortimer
On Thu, 13 Mar 1997, Remco van de Meent wrote: > [EMAIL PROTECTED]:~]$ w > 2:10pm up 1 day, 22:32h, 1 user, load average: 1.05, 1.07, 1.01 > USER TTYLOGIN@ IDLE JCPU PCPU WHAT > > [EMAIL PROTECTED]:~]$ > > > Strange, isn't it? > When I do 'last -10', there ARE users logged i

Re: strange who/wtmp

1997-03-13 Thread Ulf Jaenicke-Roessler
7;, there ARE users logged in. But they don't show up with > w/who. Same here. > Anyone hints how this little problem could be solved? No. But could this be related to the wtmp corruption that was discussed recently? I think it turned out to be a problem with SysVInit 2.70??? Ulf -- #include

strange who/wtmp

1997-03-13 Thread Remco van de Meent
Hey [EMAIL PROTECTED]:~]$ w 2:10pm up 1 day, 22:32h, 1 user, load average: 1.05, 1.07, 1.01 USER TTYLOGIN@ IDLE JCPU PCPU WHAT [EMAIL PROTECTED]:~]$ Strange, isn't it? When I do 'last -10', there ARE users logged in. But they don't show up with w/who. Anyone hints how thi

Re: wtmp locking problem (was: Re: SOLVED: Erk! Something is *really* wrong here!)

1997-03-08 Thread Craig Sanders
se if I dpkg -i *.deb in either directory the problem re-appears - if > > I then go back to original rex/binary/base it fixes it. > > As far as I know, the only other program that messes with wtmp in base > is init. So could you just try the different versions of it? Now this IS the ans

Re: wtmp locking problem (was: Re: SOLVED: Erk! Something is *really* wrong here!)

1997-03-08 Thread Joey Hess
Craig Sanders: > > On Thu, 6 Mar 1997, Joey Hess wrote: > > > This doesn't explain why the problems have only started occurring in > > the past few days. I've been using the same set A/set B mix for many > > months, and only started getting corruption this week. Something must > > have changed, a

  1   2   >